vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2015-7268

N/A
Published: November 27, 2017 at 10:00 PM UTC
Updated: June 17, 2026 at 12:32 AM UTC
8 products affected across 2 vendorsST500LT015 FirmwarePM851 Firmware850 Pro Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used on Windows and operating in Opal mode on Lenovo ThinkPad T440s laptops with BIOS 2.32 or ThinkPad W541 laptops with BIOS 2.21, or in Opal or eDrive mode on Dell Latitude E6410 laptops with BIOS A16 or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by triggering a soft reset and booting from an alternative OS, aka a "Forced Restart Attack."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

850 Pro Firmware· Samsung
95%
All versions
samsung-850-pro (same device)
PM851 Firmware· Samsung
95%
All versions
samsung-pm851 (same device)
ST500LT015 Firmware· Seagate
95%
All versions
seagate-st500lt015 (same device)
ST500LT025 Firmware· Seagate
95%
All versions
seagate-st500lt025 (same device)
850 Pro· Samsungdevice
80%
All versions
Pm851· Samsungdevice
80%
All versions
St500Lt015· Seagatedevice
80%
All versions
St500Lt025· Seagatedevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCTechnical DescriptionThird Party Advisory
Source: [email protected]
https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdf
x_refsource_MISCTechnical DescriptionThird Party Advisory
Source: [email protected]
https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.html

CVSS

1.9LOW[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-254

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card